CVE-2007-2291

None

CVSS

—

EPSS

20.1%

Published

Apr 26, 2007

CISA due date

—

The record

CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote attackers to conduct HTTP response splitting attacks via a LF (%0a) in the username attribute.

Affected packages

Ecosystem	Package	Introduced	Fixed